From 4696565c4869d1947eacce856ac9a024ba074e5e Mon Sep 17 00:00:00 2001
From: Maxi Wittich <maximilian.wittich@stackable.tech>
Date: Wed, 14 Oct 2026 13:59:05 +0200
Subject: [PATCH 1/2] updating opa to 1.20.2

---
 stacks/airflow/opa.yaml                              | 2 +-
 stacks/data-lakehouse-iceberg-trino-spark/trino.yaml | 2 +-
 stacks/end-to-end-security/opa.yaml                  | 3 ++-
 stacks/trino-iceberg/trino.yaml                      | 2 +-
 stacks/trino-superset-s3/trino.yaml                  | 2 +-
 5 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/stacks/airflow/opa.yaml b/stacks/airflow/opa.yaml
index 20a87e3a..9e0d7274 100644
--- a/stacks/airflow/opa.yaml
+++ b/stacks/airflow/opa.yaml
@@ -5,7 +5,7 @@ metadata:
   name: opa
 spec:
   image:
-    productVersion: 1.16.2
+    productVersion: 1.20.2
     pullPolicy: IfNotPresent
   servers:
     config:
diff --git a/stacks/data-lakehouse-iceberg-trino-spark/trino.yaml b/stacks/data-lakehouse-iceberg-trino-spark/trino.yaml
index a7a71313..8f922e00 100644
--- a/stacks/data-lakehouse-iceberg-trino-spark/trino.yaml
+++ b/stacks/data-lakehouse-iceberg-trino-spark/trino.yaml
@@ -118,7 +118,7 @@ metadata:
   name: opa
 spec:
   image:
-    productVersion: 1.16.2
+    productVersion: 1.20.2
   servers:
     roleGroups:
       default: {}
diff --git a/stacks/end-to-end-security/opa.yaml b/stacks/end-to-end-security/opa.yaml
index a608da99..02956971 100644
--- a/stacks/end-to-end-security/opa.yaml
+++ b/stacks/end-to-end-security/opa.yaml
@@ -5,7 +5,8 @@ metadata:
   name: opa
 spec:
   image:
-    productVersion: 1.16.2
+    productVersion: 1.20.2
+    pullPolicy: Never # LOCAL TEST ONLY - do not commit
   clusterConfig:
     userInfo:
       backend:
diff --git a/stacks/trino-iceberg/trino.yaml b/stacks/trino-iceberg/trino.yaml
index 78590b63..b388aaf4 100644
--- a/stacks/trino-iceberg/trino.yaml
+++ b/stacks/trino-iceberg/trino.yaml
@@ -103,7 +103,7 @@ metadata:
   name: opa
 spec:
   image:
-    productVersion: 1.16.2
+    productVersion: 1.20.2
   servers:
     roleGroups:
       default:
diff --git a/stacks/trino-superset-s3/trino.yaml b/stacks/trino-superset-s3/trino.yaml
index b1f2c9c6..4aa28ab4 100644
--- a/stacks/trino-superset-s3/trino.yaml
+++ b/stacks/trino-superset-s3/trino.yaml
@@ -75,7 +75,7 @@ metadata:
   name: opa
 spec:
   image:
-    productVersion: 1.16.2
+    productVersion: 1.20.2
   servers:
     roleGroups:
       default: {}

From 14655db260ea763f5b4bd82ee771404f16e2ac0d Mon Sep 17 00:00:00 2001
From: Maxi Wittich <maximilian.wittich@stackable.tech>
Date: Wed, 14 Oct 2026 14:00:28 +0200
Subject: [PATCH 2/2] removing local testing constrains

---
 stacks/end-to-end-security/opa.yaml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/stacks/end-to-end-security/opa.yaml b/stacks/end-to-end-security/opa.yaml
index 02956971..7981002d 100644
--- a/stacks/end-to-end-security/opa.yaml
+++ b/stacks/end-to-end-security/opa.yaml
@@ -6,7 +6,6 @@ metadata:
 spec:
   image:
     productVersion: 1.20.2
-    pullPolicy: Never # LOCAL TEST ONLY - do not commit
   clusterConfig:
     userInfo:
       backend: